cvx-kit 0.0.1

package/dist/components/foundation/modules/command/command.d.mts

@@ -0,0 +1,47 @@
+declare namespace command_d_exports {
+  export { Command, CommandExecution, CommandInput, CommandRegistry, CommandResult, Parseable };
+}
+type Parseable<Output> = Readonly<{
+  parse: (value: unknown) => Output;
+}>;
+type CommandRegistry = Readonly<Record<string, CommandDefinition>>;
+type CommandInput<Registry extends CommandRegistry, Key extends Operation<Registry>> = Parsed<Registry[Key]['command']>;
+type CommandResult<Registry extends CommandRegistry, Key extends Operation<Registry>> = Parsed<Registry[Key]['result']>;
+type CommandExecution<Context, Registry extends CommandRegistry, Key extends Operation<Registry>> = Readonly<{
+  context: Context;
+  operation: Key;
+  definition: Registry[Key];
+  command: CommandInput<Registry, Key>;
+  parseResult: (value: unknown) => CommandResult<Registry, Key>;
+  run: () => Promise<CommandResult<Registry, Key>>;
+}>;
+type CommandDefinition = Readonly<{
+  command: Parseable<unknown>;
+  result: Parseable<unknown>;
+}>;
+type Operation<Registry extends CommandRegistry> = Extract<keyof Registry, string>;
+type Parsed<Schema> = Schema extends Parseable<infer Output> ? Output : never;
+type MaybePromise<Value> = Value | Promise<Value>;
+type Execute<Context, Registry extends CommandRegistry> = <Key extends Operation<Registry>>(execution: CommandExecution<Context, Registry, Key>) => Promise<CommandResult<Registry, Key>>;
+type FixedExecutor<Context, Registry extends CommandRegistry, Key extends Operation<Registry>> = Readonly<{
+  operation: Key;
+  handler: (context: Context, command: CommandInput<Registry, Key>) => MaybePromise<CommandResult<Registry, Key>>;
+}>;
+type DynamicExecutor<Context, Registry extends CommandRegistry, Dispatcher, Key extends Operation<Registry>> = Readonly<{
+  dispatcher: Parseable<Dispatcher>;
+  select: (dispatcher: Dispatcher) => Key;
+  handler: (context: Context, command: CommandInput<Registry, Key>) => MaybePromise<CommandResult<Registry, Key>>;
+}>;
+/** Generic command kernel. Host policy is injected by the owning domain. */
+declare class Command<Context, const Registry extends CommandRegistry> {
+  #private;
+  constructor(configuration: {
+    readonly operations: Registry;
+    readonly execute: Execute<Context, Registry>;
+  });
+  exec<const Key extends Operation<Registry>>(executor: FixedExecutor<Context, Registry, Key>): (context: Context, command: CommandInput<Registry, Key>) => Promise<CommandResult<Registry, Key>>;
+  exec<Dispatcher, const Key extends Operation<Registry>>(executor: DynamicExecutor<Context, Registry, Dispatcher, Key>): (context: Context, command: Dispatcher) => Promise<CommandResult<Registry, Key>>;
+}
+//#endregion
+export { Command, CommandExecution, CommandInput, CommandRegistry, CommandResult, Parseable, command_d_exports };
+//# sourceMappingURL=command.d.mts.map

package/dist/components/foundation/modules/command/command.mjs

@@ -0,0 +1,2 @@
+var e=class extends Error{code=`COMMAND_OPERATION_NOT_CONFIGURED`;name=`CommandConfigurationError`;constructor(){super(`The selected command operation is not configured`)}},t=class{#e;#t;constructor(e){this.#e=e.operations,this.#t=e.execute}exec(t){return async(n,r)=>{let i=`operation`in t?{operation:t.operation,value:r}:(()=>{let e=t.dispatcher.parse(r);return{operation:t.select(e),value:e}})();if(!Object.prototype.hasOwnProperty.call(this.#e,i.operation))throw new e;let a=i.operation,o=this.#e[a],s=o.command.parse(i.value),c=e=>o.result.parse(e),l=t.handler;return this.#t({context:n,operation:a,definition:o,command:s,parseResult:c,run:async()=>c(await l(n,s))})}}};export{t as Command};
+//# sourceMappingURL=command.mjs.map

package/dist/components/foundation/modules/command/command.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.mjs","names":["#operations","#execute"],"sources":["../../../../../src/components/foundation/modules/command/command.ts"],"sourcesContent":["export type Parseable<Output> = Readonly<{ parse: (value: unknown) => Output }>\n\nexport type CommandRegistry = Readonly<Record<string, CommandDefinition>>\n\nexport type CommandInput<\n\tRegistry extends CommandRegistry,\n\tKey extends Operation<Registry>,\n> = Parsed<Registry[Key]['command']>\n\nexport type CommandResult<\n\tRegistry extends CommandRegistry,\n\tKey extends Operation<Registry>,\n> = Parsed<Registry[Key]['result']>\n\nexport type CommandExecution<\n\tContext,\n\tRegistry extends CommandRegistry,\n\tKey extends Operation<Registry>,\n> = Readonly<{\n\tcontext: Context\n\toperation: Key\n\tdefinition: Registry[Key]\n\tcommand: CommandInput<Registry, Key>\n\tparseResult: (value: unknown) => CommandResult<Registry, Key>\n\trun: () => Promise<CommandResult<Registry, Key>>\n}>\n\ntype CommandDefinition = Readonly<{\n\tcommand: Parseable<unknown>\n\tresult: Parseable<unknown>\n}>\n\ntype Operation<Registry extends CommandRegistry> = Extract<\n\tkeyof Registry,\n\tstring\n>\ntype Parsed<Schema> = Schema extends Parseable<infer Output> ? Output : never\ntype MaybePromise<Value> = Value | Promise<Value>\ntype Execute<Context, Registry extends CommandRegistry> = <\n\tKey extends Operation<Registry>,\n>(\n\texecution: CommandExecution<Context, Registry, Key>,\n) => Promise<CommandResult<Registry, Key>>\n\ntype FixedExecutor<\n\tContext,\n\tRegistry extends CommandRegistry,\n\tKey extends Operation<Registry>,\n> = Readonly<{\n\toperation: Key\n\thandler: (\n\t\tcontext: Context,\n\t\tcommand: CommandInput<Registry, Key>,\n\t) => MaybePromise<CommandResult<Registry, Key>>\n}>\n\ntype DynamicExecutor<\n\tContext,\n\tRegistry extends CommandRegistry,\n\tDispatcher,\n\tKey extends Operation<Registry>,\n> = Readonly<{\n\tdispatcher: Parseable<Dispatcher>\n\tselect: (dispatcher: Dispatcher) => Key\n\thandler: (\n\t\tcontext: Context,\n\t\tcommand: CommandInput<Registry, Key>,\n\t) => MaybePromise<CommandResult<Registry, Key>>\n}>\n\nclass CommandConfigurationError extends Error {\n\treadonly code = 'COMMAND_OPERATION_NOT_CONFIGURED'\n\treadonly name = 'CommandConfigurationError'\n\n\tconstructor() {\n\t\tsuper('The selected command operation is not configured')\n\t}\n}\n\n/** Generic command kernel. Host policy is injected by the owning domain. */\nexport class Command<Context, const Registry extends CommandRegistry> {\n\treadonly #operations: Registry\n\treadonly #execute: Execute<Context, Registry>\n\n\tconstructor(configuration: {\n\t\treadonly operations: Registry\n\t\treadonly execute: Execute<Context, Registry>\n\t}) {\n\t\tthis.#operations = configuration.operations\n\t\tthis.#execute = configuration.execute\n\t}\n\n\texec<const Key extends Operation<Registry>>(\n\t\texecutor: FixedExecutor<Context, Registry, Key>,\n\t): (\n\t\tcontext: Context,\n\t\tcommand: CommandInput<Registry, Key>,\n\t) => Promise<CommandResult<Registry, Key>>\n\texec<Dispatcher, const Key extends Operation<Registry>>(\n\t\texecutor: DynamicExecutor<Context, Registry, Dispatcher, Key>,\n\t): (\n\t\tcontext: Context,\n\t\tcommand: Dispatcher,\n\t) => Promise<CommandResult<Registry, Key>>\n\texec(\n\t\texecutor:\n\t\t\t| FixedExecutor<Context, Registry, Operation<Registry>>\n\t\t\t| DynamicExecutor<Context, Registry, unknown, Operation<Registry>>,\n\t) {\n\t\treturn async (context: Context, value: unknown) => {\n\t\t\tconst selected =\n\t\t\t\t'operation' in executor\n\t\t\t\t\t? { operation: executor.operation, value }\n\t\t\t\t\t: (() => {\n\t\t\t\t\t\t\tconst dispatcher = executor.dispatcher.parse(value)\n\t\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\t\toperation: executor.select(dispatcher),\n\t\t\t\t\t\t\t\tvalue: dispatcher,\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t})()\n\t\t\tif (\n\t\t\t\t!Object.prototype.hasOwnProperty.call(\n\t\t\t\t\tthis.#operations,\n\t\t\t\t\tselected.operation,\n\t\t\t\t)\n\t\t\t) {\n\t\t\t\tthrow new CommandConfigurationError()\n\t\t\t}\n\t\t\tconst operation = selected.operation as Operation<Registry>\n\t\t\tconst definition = this.#operations[operation]\n\t\t\tconst command = definition.command.parse(selected.value) as CommandInput<\n\t\t\t\tRegistry,\n\t\t\t\tOperation<Registry>\n\t\t\t>\n\t\t\tconst parseResult = (result: unknown) =>\n\t\t\t\tdefinition.result.parse(result) as CommandResult<\n\t\t\t\t\tRegistry,\n\t\t\t\t\tOperation<Registry>\n\t\t\t\t>\n\t\t\tconst handler = executor.handler as (\n\t\t\t\tcontext: Context,\n\t\t\t\tcommand: CommandInput<Registry, Operation<Registry>>,\n\t\t\t) => MaybePromise<CommandResult<Registry, Operation<Registry>>>\n\t\t\treturn this.#execute({\n\t\t\t\tcontext,\n\t\t\t\toperation,\n\t\t\t\tdefinition,\n\t\t\t\tcommand,\n\t\t\t\tparseResult,\n\t\t\t\trun: async () => parseResult(await handler(context, command)),\n\t\t\t})\n\t\t}\n\t}\n}\n"],"mappings":"AAsEA,IAAM,EAAN,cAAwC,KAAM,CAC7C,KAAgB,mCAChB,KAAgB,4BAEhB,aAAc,CACb,MAAM,kDAAkD,CACzD,CACD,EAGa,EAAb,KAAsE,CACrE,GACA,GAEA,YAAY,EAGT,CACF,KAAKA,GAAc,EAAc,WACjC,KAAKC,GAAW,EAAc,OAC/B,CAcA,KACC,EAGC,CACD,OAAO,MAAO,EAAkB,IAAmB,CAClD,IAAM,EACL,cAAe,EACZ,CAAE,UAAW,EAAS,UAAW,OAAM,OAChC,CACP,IAAM,EAAa,EAAS,WAAW,MAAM,CAAK,EAClD,MAAO,CACN,UAAW,EAAS,OAAO,CAAU,EACrC,MAAO,CACR,CACD,EAAA,CAAG,EACN,GACC,CAAC,OAAO,UAAU,eAAe,KAChC,KAAKD,GACL,EAAS,SACV,EAEA,MAAM,IAAI,EAEX,IAAM,EAAY,EAAS,UACrB,EAAa,KAAKA,GAAY,GAC9B,EAAU,EAAW,QAAQ,MAAM,EAAS,KAAK,EAIjD,EAAe,GACpB,EAAW,OAAO,MAAM,CAAM,EAIzB,EAAU,EAAS,QAIzB,OAAO,KAAKC,GAAS,CACpB,UACA,YACA,aACA,UACA,cACA,IAAK,SAAY,EAAY,MAAM,EAAQ,EAAS,CAAO,CAAC,CAC7D,CAAC,CACF,CACD,CACD"}

package/dist/components/foundation/modules/observability/observability.d.mts

@@ -0,0 +1,31 @@
+declare namespace observability_d_exports {
+  export { CommandObservation, Observability, ObservabilityOptions };
+}
+type CommandObservation = Readonly<{
+  operation: string;
+  classification: string;
+  outcome: 'completed' | 'denied' | 'failed';
+  errorCode?: string;
+  durationMs: number;
+}>;
+type ObservabilityOptions = Readonly<{
+  enabled?: boolean | (() => boolean);
+  classifyError: (error: unknown) => Readonly<{
+    outcome: 'denied' | 'failed';
+    errorCode: string;
+  }>;
+  emit?: (observation: CommandObservation) => void;
+  clock?: () => number;
+}>;
+/** Payload-free command telemetry that cannot change command behavior. */
+declare class Observability {
+  #private;
+  constructor(options: ObservabilityOptions);
+  observe<Result>(activation: Readonly<{
+    operation: string;
+    classification: string;
+  }>, execute: () => Result | Promise<Result>): Promise<Result>;
+}
+//#endregion
+export { CommandObservation, Observability, ObservabilityOptions, observability_d_exports };
+//# sourceMappingURL=observability.d.mts.map

package/dist/components/foundation/modules/observability/observability.mjs

@@ -0,0 +1,2 @@
+const e=/^[A-Za-z][A-Za-z0-9_.-]{0,159}$/,t=/^[A-Z][A-Z0-9_]{0,95}$/;var n=class{#e;constructor(e){this.#e=e}async observe(e,t){let n=this.#n();try{let r=await t();return this.#t({...e,outcome:`completed`,durationMs:this.#r(n)}),r}catch(t){try{this.#t({...e,...this.#e.classifyError(t),durationMs:this.#r(n)})}catch{}throw t}}#t(n){try{if((typeof this.#e.enabled==`function`?this.#e.enabled():this.#e.enabled)!==!0||!e.test(n.operation)||!e.test(n.classification)||n.errorCode!==void 0&&!t.test(n.errorCode))return;if(this.#e.emit){this.#e.emit(Object.freeze(n));return}console.info(JSON.stringify({event:`command.execution`,...n}))}catch{}}#n(){try{return this.#e.clock?.()??Date.now()}catch{return Date.now()}}#r(e){return Math.max(0,Math.min(6e5,this.#n()-e))}};export{n as Observability};
+//# sourceMappingURL=observability.mjs.map

package/dist/components/foundation/modules/observability/observability.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.mjs","names":["#options","#now","#emit","#duration"],"sources":["../../../../../src/components/foundation/modules/observability/observability.ts"],"sourcesContent":["export type CommandObservation = Readonly<{\n\toperation: string\n\tclassification: string\n\toutcome: 'completed' | 'denied' | 'failed'\n\terrorCode?: string\n\tdurationMs: number\n}>\n\nexport type ObservabilityOptions = Readonly<{\n\tenabled?: boolean | (() => boolean)\n\tclassifyError: (error: unknown) => Readonly<{\n\t\toutcome: 'denied' | 'failed'\n\t\terrorCode: string\n\t}>\n\temit?: (observation: CommandObservation) => void\n\tclock?: () => number\n}>\n\nconst identifier = /^[A-Za-z][A-Za-z0-9_.-]{0,159}$/\nconst errorCode = /^[A-Z][A-Z0-9_]{0,95}$/\n\n/** Payload-free command telemetry that cannot change command behavior. */\nexport class Observability {\n\treadonly #options: ObservabilityOptions\n\n\tconstructor(options: ObservabilityOptions) {\n\t\tthis.#options = options\n\t}\n\n\tasync observe<Result>(\n\t\tactivation: Readonly<{ operation: string; classification: string }>,\n\t\texecute: () => Result | Promise<Result>,\n\t): Promise<Result> {\n\t\tconst started = this.#now()\n\t\ttry {\n\t\t\tconst result = await execute()\n\t\t\tthis.#emit({\n\t\t\t\t...activation,\n\t\t\t\toutcome: 'completed',\n\t\t\t\tdurationMs: this.#duration(started),\n\t\t\t})\n\t\t\treturn result\n\t\t} catch (error) {\n\t\t\ttry {\n\t\t\t\tthis.#emit({\n\t\t\t\t\t...activation,\n\t\t\t\t\t...this.#options.classifyError(error),\n\t\t\t\t\tdurationMs: this.#duration(started),\n\t\t\t\t})\n\t\t\t} catch {\n\t\t\t\t// Preserve the original command failure when telemetry fails.\n\t\t\t}\n\t\t\tthrow error\n\t\t}\n\t}\n\n\t#emit(observation: CommandObservation): void {\n\t\ttry {\n\t\t\tconst enabled =\n\t\t\t\ttypeof this.#options.enabled === 'function'\n\t\t\t\t\t? this.#options.enabled()\n\t\t\t\t\t: this.#options.enabled\n\t\t\tif (\n\t\t\t\tenabled !== true ||\n\t\t\t\t!identifier.test(observation.operation) ||\n\t\t\t\t!identifier.test(observation.classification) ||\n\t\t\t\t(observation.errorCode !== undefined &&\n\t\t\t\t\t!errorCode.test(observation.errorCode))\n\t\t\t) {\n\t\t\t\treturn\n\t\t\t}\n\t\t\tif (this.#options.emit) {\n\t\t\t\tthis.#options.emit(Object.freeze(observation))\n\t\t\t\treturn\n\t\t\t}\n\t\t\tconsole.info(\n\t\t\t\tJSON.stringify({ event: 'command.execution', ...observation }),\n\t\t\t)\n\t\t} catch {\n\t\t\t// Observability is intentionally behaviorally inert.\n\t\t}\n\t}\n\n\t#now(): number {\n\t\ttry {\n\t\t\treturn this.#options.clock?.() ?? Date.now()\n\t\t} catch {\n\t\t\treturn Date.now()\n\t\t}\n\t}\n\n\t#duration(started: number): number {\n\t\treturn Math.max(0, Math.min(600_000, this.#now() - started))\n\t}\n}\n"],"mappings":"AAkBA,MAAM,EAAa,kCACb,EAAY,yBAGlB,IAAa,EAAb,KAA2B,CAC1B,GAEA,YAAY,EAA+B,CAC1C,KAAKA,GAAW,CACjB,CAEA,MAAM,QACL,EACA,EACkB,CAClB,IAAM,EAAU,KAAKC,GAAK,EAC1B,GAAI,CACH,IAAM,EAAS,MAAM,EAAQ,EAM7B,OALA,KAAKC,GAAM,CACV,GAAG,EACH,QAAS,YACT,WAAY,KAAKC,GAAU,CAAO,CACnC,CAAC,EACM,CACR,OAAS,EAAO,CACf,GAAI,CACH,KAAKD,GAAM,CACV,GAAG,EACH,GAAG,KAAKF,GAAS,cAAc,CAAK,EACpC,WAAY,KAAKG,GAAU,CAAO,CACnC,CAAC,CACF,MAAQ,CAER,CACA,MAAM,CACP,CACD,CAEA,GAAM,EAAuC,CAC5C,GAAI,CAKH,IAHC,OAAO,KAAKH,GAAS,SAAY,WAC9B,KAAKA,GAAS,QAAQ,EACtB,KAAKA,GAAS,WAEL,IACZ,CAAC,EAAW,KAAK,EAAY,SAAS,GACtC,CAAC,EAAW,KAAK,EAAY,cAAc,GAC1C,EAAY,YAAc,IAAA,IAC1B,CAAC,EAAU,KAAK,EAAY,SAAS,EAEtC,OAED,GAAI,KAAKA,GAAS,KAAM,CACvB,KAAKA,GAAS,KAAK,OAAO,OAAO,CAAW,CAAC,EAC7C,MACD,CACA,QAAQ,KACP,KAAK,UAAU,CAAE,MAAO,oBAAqB,GAAG,CAAY,CAAC,CAC9D,CACD,MAAQ,CAER,CACD,CAEA,IAAe,CACd,GAAI,CACH,OAAO,KAAKA,GAAS,QAAQ,GAAK,KAAK,IAAI,CAC5C,MAAQ,CACP,OAAO,KAAK,IAAI,CACjB,CACD,CAEA,GAAU,EAAyB,CAClC,OAAO,KAAK,IAAI,EAAG,KAAK,IAAI,IAAS,KAAKC,GAAK,EAAI,CAAO,CAAC,CAC5D,CACD"}

package/dist/components/foundation/modules/query/query.d.mts

@@ -0,0 +1,24 @@
+declare namespace query_d_exports {
+  export { Query, QueryExecution };
+}
+type QueryExecution<Context, Metadata, Result> = Readonly<{
+  context: Context;
+  metadata: Metadata;
+  run: () => Promise<Result>;
+}>;
+type MaybePromise<Value> = Value | Promise<Value>;
+/** Generic query kernel. Authorization remains an injected host policy. */
+declare class Query<Context, Defaults extends object> {
+  #private;
+  constructor(configuration: {
+    readonly defaults: Defaults;
+    readonly execute: <Metadata extends object, Result>(execution: QueryExecution<Context, Defaults & Metadata, Result>) => Promise<Result>;
+  });
+  exec<Arguments extends readonly unknown[], Result, Metadata extends object = object>(executor: {
+    readonly metadata?: Metadata;
+    readonly handler: (context: Context, ...args: Arguments) => MaybePromise<Result>;
+  }): (context: Context, ...args: Arguments) => Promise<Result>;
+}
+//#endregion
+export { Query, QueryExecution, query_d_exports };
+//# sourceMappingURL=query.d.mts.map

package/dist/components/foundation/modules/query/query.mjs

@@ -0,0 +1,2 @@
+var e=class{#e;#t;constructor(e){this.#e=e.defaults,this.#t=e.execute}exec(e){return(t,...n)=>this.#t({context:t,metadata:{...this.#e,...e.metadata??{}},run:async()=>e.handler(t,...n)})}};export{e as Query};
+//# sourceMappingURL=query.mjs.map

package/dist/components/foundation/modules/query/query.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.mjs","names":["#defaults","#execute"],"sources":["../../../../../src/components/foundation/modules/query/query.ts"],"sourcesContent":["export type QueryExecution<Context, Metadata, Result> = Readonly<{\n\tcontext: Context\n\tmetadata: Metadata\n\trun: () => Promise<Result>\n}>\n\ntype MaybePromise<Value> = Value | Promise<Value>\n\n/** Generic query kernel. Authorization remains an injected host policy. */\nexport class Query<Context, Defaults extends object> {\n\treadonly #defaults: Defaults\n\treadonly #execute: <Metadata extends object, Result>(\n\t\texecution: QueryExecution<Context, Defaults & Metadata, Result>,\n\t) => Promise<Result>\n\n\tconstructor(configuration: {\n\t\treadonly defaults: Defaults\n\t\treadonly execute: <Metadata extends object, Result>(\n\t\t\texecution: QueryExecution<Context, Defaults & Metadata, Result>,\n\t\t) => Promise<Result>\n\t}) {\n\t\tthis.#defaults = configuration.defaults\n\t\tthis.#execute = configuration.execute\n\t}\n\n\texec<\n\t\tArguments extends readonly unknown[],\n\t\tResult,\n\t\tMetadata extends object = object,\n\t>(executor: {\n\t\treadonly metadata?: Metadata\n\t\treadonly handler: (\n\t\t\tcontext: Context,\n\t\t\t...args: Arguments\n\t\t) => MaybePromise<Result>\n\t}): (context: Context, ...args: Arguments) => Promise<Result> {\n\t\treturn (context, ...args) =>\n\t\t\tthis.#execute({\n\t\t\t\tcontext,\n\t\t\t\tmetadata: {\n\t\t\t\t\t...this.#defaults,\n\t\t\t\t\t...(executor.metadata ?? ({} as Metadata)),\n\t\t\t\t},\n\t\t\t\trun: async () => executor.handler(context, ...args),\n\t\t\t})\n\t}\n}\n"],"mappings":"AASA,IAAa,EAAb,KAAqD,CACpD,GACA,GAIA,YAAY,EAKT,CACF,KAAKA,GAAY,EAAc,SAC/B,KAAKC,GAAW,EAAc,OAC/B,CAEA,KAIE,EAM4D,CAC7D,OAAQ,EAAS,GAAG,IACnB,KAAKA,GAAS,CACb,UACA,SAAU,CACT,GAAG,KAAKD,GACR,GAAI,EAAS,UAAa,CAAC,CAC5B,EACA,IAAK,SAAY,EAAS,QAAQ,EAAS,GAAG,CAAI,CACnD,CAAC,CACH,CACD"}

package/dist/components/foundation/result.d.mts

@@ -0,0 +1,27 @@
+import { TransactionMetrics } from "convex/server";
+declare namespace result_d_exports {
+  export { Result, ResultBoundary, TransactionMetricsContext, executeResultBoundary, projectResult };
+}
+type TransactionMetricsContext = Readonly<{
+  meta: Readonly<{
+    getTransactionMetrics: () => Promise<TransactionMetrics>;
+  }>;
+}>;
+type Result<Value, Failure> = Readonly<{
+  ok: true;
+  value: Value;
+}> | Readonly<{
+  ok: false;
+  error: Failure;
+}>;
+type ResultBoundary<Failure> = Readonly<{
+  ok: <Value>(value: Value) => Result<Value, Failure>;
+  handledError: <Value = never>(failure: Failure) => Result<Value, Failure>;
+  dataOf: (error: unknown) => Failure | undefined;
+}>;
+/** Return handled failures only before effects; otherwise rethrow for rollback. */
+declare function executeResultBoundary<Value, Failure>(ctx: TransactionMetricsContext, operation: () => Promise<Value>, boundary: ResultBoundary<Failure>): Promise<Result<Value, Failure>>;
+declare function projectResult<Value, Failure>(result: Result<Value, Failure>, projectFailure: (failure: Failure) => never): Value;
+//#endregion
+export { Result, ResultBoundary, TransactionMetricsContext, executeResultBoundary, projectResult, result_d_exports };
+//# sourceMappingURL=result.d.mts.map

package/dist/components/foundation/result.mjs

@@ -0,0 +1,2 @@
+const e=[`bytesRead`,`bytesWritten`,`databaseQueries`,`documentsRead`,`documentsWritten`,`functionsScheduled`,`scheduledFunctionArgsBytes`],t=[`bytesWritten`,`documentsWritten`,`functionsScheduled`,`scheduledFunctionArgsBytes`];async function n(e,t,n){try{return n.ok(await t())}catch(t){let r=n.dataOf(t);if(r===void 0)throw t;try{if(i(await e.meta.getTransactionMetrics()))throw t}catch{throw t}return n.handledError(r)}}function r(e,t){return e.ok?e.value:t(e.error)}function i(n){for(let t of e){let e=n[t];if(!e||!Number.isFinite(e.used)||e.used<0||!Number.isFinite(e.remaining)||e.remaining<0)throw Error(`Unreadable transaction metrics`)}return t.some(e=>n[e].used>0)}export{n as executeResultBoundary,r as projectResult};
+//# sourceMappingURL=result.mjs.map

package/dist/components/foundation/result.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.mjs","names":[],"sources":["../../../src/components/foundation/result.ts"],"sourcesContent":["import type { TransactionMetrics } from 'convex/server'\n\nexport type TransactionMetricsContext = Readonly<{\n\tmeta: Readonly<{\n\t\tgetTransactionMetrics: () => Promise<TransactionMetrics>\n\t}>\n}>\n\nexport type Result<Value, Failure> =\n\t| Readonly<{ ok: true; value: Value }>\n\t| Readonly<{ ok: false; error: Failure }>\n\nexport type ResultBoundary<Failure> = Readonly<{\n\tok: <Value>(value: Value) => Result<Value, Failure>\n\thandledError: <Value = never>(failure: Failure) => Result<Value, Failure>\n\tdataOf: (error: unknown) => Failure | undefined\n}>\n\nconst metricNames = [\n\t'bytesRead',\n\t'bytesWritten',\n\t'databaseQueries',\n\t'documentsRead',\n\t'documentsWritten',\n\t'functionsScheduled',\n\t'scheduledFunctionArgsBytes',\n] as const satisfies readonly (keyof TransactionMetrics)[]\n\nconst effectMetricNames = [\n\t'bytesWritten',\n\t'documentsWritten',\n\t'functionsScheduled',\n\t'scheduledFunctionArgsBytes',\n] as const satisfies readonly (keyof TransactionMetrics)[]\n\n/** Return handled failures only before effects; otherwise rethrow for rollback. */\nexport async function executeResultBoundary<Value, Failure>(\n\tctx: TransactionMetricsContext,\n\toperation: () => Promise<Value>,\n\tboundary: ResultBoundary<Failure>,\n): Promise<Result<Value, Failure>> {\n\ttry {\n\t\treturn boundary.ok(await operation())\n\t} catch (error) {\n\t\tconst handled = boundary.dataOf(error)\n\t\tif (handled === undefined) throw error\n\t\ttry {\n\t\t\tif (hasEffects(await ctx.meta.getTransactionMetrics())) throw error\n\t\t} catch {\n\t\t\tthrow error\n\t\t}\n\t\treturn boundary.handledError(handled)\n\t}\n}\n\nexport function projectResult<Value, Failure>(\n\tresult: Result<Value, Failure>,\n\tprojectFailure: (failure: Failure) => never,\n): Value {\n\treturn result.ok ? result.value : projectFailure(result.error)\n}\n\nfunction hasEffects(metrics: TransactionMetrics): boolean {\n\tfor (const name of metricNames) {\n\t\tconst metric = metrics[name]\n\t\tif (\n\t\t\t!metric ||\n\t\t\t!Number.isFinite(metric.used) ||\n\t\t\tmetric.used < 0 ||\n\t\t\t!Number.isFinite(metric.remaining) ||\n\t\t\tmetric.remaining < 0\n\t\t) {\n\t\t\tthrow new Error('Unreadable transaction metrics')\n\t\t}\n\t}\n\treturn effectMetricNames.some((name) => metrics[name].used > 0)\n}\n"],"mappings":"AAkBA,MAAM,EAAc,CACnB,YACA,eACA,kBACA,gBACA,mBACA,qBACA,4BACD,EAEM,EAAoB,CACzB,eACA,mBACA,qBACA,4BACD,EAGA,eAAsB,EACrB,EACA,EACA,EACkC,CAClC,GAAI,CACH,OAAO,EAAS,GAAG,MAAM,EAAU,CAAC,CACrC,OAAS,EAAO,CACf,IAAM,EAAU,EAAS,OAAO,CAAK,EACrC,GAAI,IAAY,IAAA,GAAW,MAAM,EACjC,GAAI,CACH,GAAI,EAAW,MAAM,EAAI,KAAK,sBAAsB,CAAC,EAAG,MAAM,CAC/D,MAAQ,CACP,MAAM,CACP,CACA,OAAO,EAAS,aAAa,CAAO,CACrC,CACD,CAEA,SAAgB,EACf,EACA,EACQ,CACR,OAAO,EAAO,GAAK,EAAO,MAAQ,EAAe,EAAO,KAAK,CAC9D,CAEA,SAAS,EAAW,EAAsC,CACzD,IAAK,IAAM,KAAQ,EAAa,CAC/B,IAAM,EAAS,EAAQ,GACvB,GACC,CAAC,GACD,CAAC,OAAO,SAAS,EAAO,IAAI,GAC5B,EAAO,KAAO,GACd,CAAC,OAAO,SAAS,EAAO,SAAS,GACjC,EAAO,UAAY,EAEnB,MAAU,MAAM,gCAAgC,CAElD,CACA,OAAO,EAAkB,KAAM,GAAS,EAAQ,EAAK,CAAC,KAAO,CAAC,CAC/D"}

package/dist/components/foundation/schema.d.mts

@@ -0,0 +1,6 @@
+//#region src/components/foundation/schema.d.ts
+/** Foundation is a capability-free in-process kernel and owns no business data. */
+declare const _default: import("convex/server").SchemaDefinition<{}, true>;
+//#endregion
+export { _default as default };
+//# sourceMappingURL=schema.d.mts.map

package/dist/components/foundation/schema.mjs

@@ -0,0 +1,2 @@
+import{defineSchema as e}from"convex/server";var t=e({});export{t as default};
+//# sourceMappingURL=schema.mjs.map

package/dist/components/foundation/schema.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.mjs","names":[],"sources":["../../../src/components/foundation/schema.ts"],"sourcesContent":["import { defineSchema } from 'convex/server'\n\n/** Foundation is a capability-free in-process kernel and owns no business data. */\nexport default defineSchema({})\n"],"mappings":"6CAGA,IAAA,EAAe,EAAa,CAAC,CAAC"}

package/dist/components/foundation/telemetry.d.mts

@@ -0,0 +1,9 @@
+declare namespace telemetry_d_exports {
+  export { emitSemanticEvent };
+}
+type SemanticValue = string | number | boolean;
+/** Emit bounded semantic fields only; free-form payloads and identifiers drop. */
+declare function emitSemanticEvent(event: string, fields?: Readonly<Record<string, SemanticValue | undefined>>): void;
+//#endregion
+export { emitSemanticEvent, telemetry_d_exports };
+//# sourceMappingURL=telemetry.d.mts.map

package/dist/components/foundation/telemetry.mjs

@@ -0,0 +1,2 @@
+const e=/^[A-Za-z][A-Za-z0-9_.-]{0,159}$/;function t(t,n={}){try{if(!e.test(t))return;let r={event:t};for(let[t,i]of Object.entries(n))!e.test(t)||i===void 0||typeof i==`string`&&!e.test(i)||typeof i==`number`&&!Number.isFinite(i)||(r[t]=i);console.info(JSON.stringify(r))}catch{}}export{t as emitSemanticEvent};
+//# sourceMappingURL=telemetry.mjs.map

package/dist/components/foundation/telemetry.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.mjs","names":[],"sources":["../../../src/components/foundation/telemetry.ts"],"sourcesContent":["type SemanticValue = string | number | boolean\n\nconst semanticToken = /^[A-Za-z][A-Za-z0-9_.-]{0,159}$/\n\n/** Emit bounded semantic fields only; free-form payloads and identifiers drop. */\nexport function emitSemanticEvent(\n\tevent: string,\n\tfields: Readonly<Record<string, SemanticValue | undefined>> = {},\n): void {\n\ttry {\n\t\tif (!semanticToken.test(event)) return\n\t\tconst safe: Record<string, SemanticValue> = { event }\n\t\tfor (const [key, value] of Object.entries(fields)) {\n\t\t\tif (!semanticToken.test(key) || value === undefined) continue\n\t\t\tif (typeof value === 'string' && !semanticToken.test(value)) continue\n\t\t\tif (typeof value === 'number' && !Number.isFinite(value)) continue\n\t\t\tsafe[key] = value\n\t\t}\n\t\tconsole.info(JSON.stringify(safe))\n\t} catch {\n\t\t// Telemetry must never change command behavior.\n\t}\n}\n"],"mappings":"AAEA,MAAM,EAAgB,kCAGtB,SAAgB,EACf,EACA,EAA8D,CAAC,EACxD,CACP,GAAI,CACH,GAAI,CAAC,EAAc,KAAK,CAAK,EAAG,OAChC,IAAM,EAAsC,CAAE,OAAM,EACpD,IAAK,GAAM,CAAC,EAAK,KAAU,OAAO,QAAQ,CAAM,EAC3C,CAAC,EAAc,KAAK,CAAG,GAAK,IAAU,IAAA,IACtC,OAAO,GAAU,UAAY,CAAC,EAAc,KAAK,CAAK,GACtD,OAAO,GAAU,UAAY,CAAC,OAAO,SAAS,CAAK,IACvD,EAAK,GAAO,GAEb,QAAQ,KAAK,KAAK,UAAU,CAAI,CAAC,CAClC,MAAQ,CAER,CACD"}

package/dist/errors.d.mts

@@ -0,0 +1,24 @@
+//#region src/errors.d.ts
+/** Structured application error carried across Convex function boundaries. */
+declare class KitError extends Error {
+  readonly code: string;
+  constructor(input: {
+    code: string;
+    message?: string;
+  });
+}
+/**
+ * Injection seam for host error policy. Hosts with their own error taxonomy
+ * (e.g. an App.errors singleton) adapt it to this shape; everyone else uses
+ * the default factory below.
+ */
+type ErrorFactory = {
+  throw(input: {
+    code: string;
+    message?: string;
+  }): never;
+};
+declare const defaultErrors: ErrorFactory;
+//#endregion
+export { ErrorFactory, KitError, defaultErrors };
+//# sourceMappingURL=errors.d.mts.map

package/dist/errors.mjs

@@ -0,0 +1,2 @@
+var e=class extends Error{code;constructor(e){super(e.message??e.code),this.name=`KitError`,this.code=e.code}};const t={throw(t){throw new e(t)}};export{e as KitError,t as defaultErrors};
+//# sourceMappingURL=errors.mjs.map

package/dist/errors.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.mjs","names":[],"sources":["../src/errors.ts"],"sourcesContent":["/** Structured application error carried across Convex function boundaries. */\nexport class KitError extends Error {\n\treadonly code: string\n\n\tconstructor(input: { code: string; message?: string }) {\n\t\tsuper(input.message ?? input.code)\n\t\tthis.name = 'KitError'\n\t\tthis.code = input.code\n\t}\n}\n\n/**\n * Injection seam for host error policy. Hosts with their own error taxonomy\n * (e.g. an App.errors singleton) adapt it to this shape; everyone else uses\n * the default factory below.\n */\nexport type ErrorFactory = {\n\tthrow(input: { code: string; message?: string }): never\n}\n\nexport const defaultErrors: ErrorFactory = {\n\tthrow(input) {\n\t\tthrow new KitError(input)\n\t},\n}\n"],"mappings":"AACA,IAAa,EAAb,cAA8B,KAAM,CACnC,KAEA,YAAY,EAA2C,CACtD,MAAM,EAAM,SAAW,EAAM,IAAI,EACjC,KAAK,KAAO,WACZ,KAAK,KAAO,EAAM,IACnB,CACD,EAWA,MAAa,EAA8B,CAC1C,MAAM,EAAO,CACZ,MAAM,IAAI,EAAS,CAAK,CACzB,CACD"}

package/dist/index.d.mts

@@ -0,0 +1,6 @@
+import { ErrorFactory, KitError, defaultErrors } from "./errors.mjs";
+import { Actor, AuthBundle, AuthFunctionsConfig, DefaultRole, Include, IncludedQuery, createAuthFunctions, createInclude, defaultRoleMap } from "./auth.mjs";
+import { ApplicationCommand, AuditEntryInput, AuditWriter, AuditedOperation, AuditedRegistry, Foundation, FoundationOptions } from "./components/foundation/client.mjs";
+import { TIMESTAMP_FIELDS, TableBoundaryOptions, jsonSafeZid, zodTable, zodVariantTable } from "./zod-table.mjs";
+import { Change, Trigger, Triggers, appendOnly, createTriggers, noDelete, timestamps } from "./triggers.mjs";
+export { type Actor, type ApplicationCommand, type AuditEntryInput, type AuditWriter, type AuditedOperation, type AuditedRegistry, type AuthBundle, type AuthFunctionsConfig, type Change, type DefaultRole, type ErrorFactory, Foundation, type FoundationOptions, type Include, type IncludedQuery, KitError, TIMESTAMP_FIELDS, type TableBoundaryOptions, type Trigger, Triggers, appendOnly, createAuthFunctions, createInclude, createTriggers, defaultErrors, defaultRoleMap, jsonSafeZid, noDelete, timestamps, zodTable, zodVariantTable };

package/dist/index.mjs

@@ -0,0 +1 @@
+import{KitError as e,defaultErrors as t}from"./errors.mjs";import{createAuthFunctions as n,createInclude as r,defaultRoleMap as i}from"./auth.mjs";import{TIMESTAMP_FIELDS as a,jsonSafeZid as o,zodTable as s,zodVariantTable as c}from"./zod-table.mjs";import{Triggers as l,appendOnly as u,createTriggers as d,noDelete as f,timestamps as p}from"./triggers.mjs";import{Foundation as m}from"./components/foundation/client.mjs";export{m as Foundation,e as KitError,a as TIMESTAMP_FIELDS,l as Triggers,u as appendOnly,n as createAuthFunctions,r as createInclude,d as createTriggers,t as defaultErrors,i as defaultRoleMap,o as jsonSafeZid,f as noDelete,p as timestamps,s as zodTable,c as zodVariantTable};

package/dist/triggers.d.mts

@@ -0,0 +1,27 @@
+import { GenericDataModel, TableNamesInDataModel } from "convex/server";
+import { Change, Trigger, Triggers } from "convex-helpers/server/triggers";
+//#region src/triggers.d.ts
+/**
+ * One application-wide mutation interceptor registry. Pass it to
+ * createAuthFunctions({ triggers }) so every authMutation/roleMutation/
+ * systemMutation runs writes through it — trigger enforcement becomes
+ * structural, not a convention.
+ */
+declare function createTriggers<DataModel extends GenericDataModel>(): Triggers<DataModel>;
+/**
+ * Marks tables as append-only evidence tables: inserts pass, every update or
+ * delete throws. The ontology pattern for votes/history/audit-style tables.
+ */
+declare function appendOnly<DataModel extends GenericDataModel>(triggers: Triggers<DataModel>, ...tables: readonly TableNamesInDataModel<DataModel>[]): void;
+/** Forbids hard deletes on the given tables (soft-delete discipline). */
+declare function noDelete<DataModel extends GenericDataModel>(triggers: Triggers<DataModel>, ...tables: readonly TableNamesInDataModel<DataModel>[]): void;
+/**
+ * Maintains zod-table's opinionated lifecycle timestamps: createdAt and
+ * updatedAt on insert, updatedAt on every update. archivedAt stays under
+ * application control. Register once per table; writes made through the
+ * auth constructors keep these fields correct automatically.
+ */
+declare function timestamps<DataModel extends GenericDataModel>(triggers: Triggers<DataModel>, ...tables: readonly TableNamesInDataModel<DataModel>[]): void;
+//#endregion
+export { type Change, type Trigger, Triggers, appendOnly, createTriggers, noDelete, timestamps };
+//# sourceMappingURL=triggers.d.mts.map

package/dist/triggers.mjs

@@ -0,0 +1,2 @@
+import{Triggers as e}from"convex-helpers/server/triggers";function t(){return new e}function n(e,...t){for(let n of t)e.register(n,async(e,t)=>{if(t.operation!==`insert`)throw Error(`${n} is append-only`)})}function r(e,...t){for(let n of t)e.register(n,async(e,t)=>{if(t.operation===`delete`)throw Error(`${n} rows cannot be deleted`)})}function i(e,...t){for(let n of t)e.register(n,async(e,t)=>{if(t.operation===`delete`)return;let n=Date.now();if(t.operation===`insert`){t.newDoc.createdAt===void 0&&await e.innerDb.patch(t.id,{createdAt:n,updatedAt:n});return}let r=t.oldDoc;t.newDoc.updatedAt===r.updatedAt&&await e.innerDb.patch(t.id,{updatedAt:n})})}export{e as Triggers,n as appendOnly,t as createTriggers,r as noDelete,i as timestamps};
+//# sourceMappingURL=triggers.mjs.map

package/dist/triggers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"triggers.mjs","names":[],"sources":["../src/triggers.ts"],"sourcesContent":["import {\n\tTriggers,\n\ttype Change,\n\ttype Trigger,\n} from 'convex-helpers/server/triggers'\nimport type {\n\tGenericDataModel,\n\tTableNamesInDataModel,\n} from 'convex/server'\n\nexport { Triggers }\nexport type { Change, Trigger }\n\n/**\n * One application-wide mutation interceptor registry. Pass it to\n * createAuthFunctions({ triggers }) so every authMutation/roleMutation/\n * systemMutation runs writes through it — trigger enforcement becomes\n * structural, not a convention.\n */\nexport function createTriggers<\n\tDataModel extends GenericDataModel,\n>(): Triggers<DataModel> {\n\treturn new Triggers<DataModel>()\n}\n\n/**\n * Marks tables as append-only evidence tables: inserts pass, every update or\n * delete throws. The ontology pattern for votes/history/audit-style tables.\n */\nexport function appendOnly<DataModel extends GenericDataModel>(\n\ttriggers: Triggers<DataModel>,\n\t...tables: readonly TableNamesInDataModel<DataModel>[]\n) {\n\tfor (const table of tables) {\n\t\ttriggers.register(table, async (_ctx, change) => {\n\t\t\tif (change.operation !== 'insert') {\n\t\t\t\tthrow new Error(`${table} is append-only`)\n\t\t\t}\n\t\t})\n\t}\n}\n\n/** Forbids hard deletes on the given tables (soft-delete discipline). */\nexport function noDelete<DataModel extends GenericDataModel>(\n\ttriggers: Triggers<DataModel>,\n\t...tables: readonly TableNamesInDataModel<DataModel>[]\n) {\n\tfor (const table of tables) {\n\t\ttriggers.register(table, async (_ctx, change) => {\n\t\t\tif (change.operation === 'delete') {\n\t\t\t\tthrow new Error(`${table} rows cannot be deleted`)\n\t\t\t}\n\t\t})\n\t}\n}\n\n/**\n * Maintains zod-table's opinionated lifecycle timestamps: createdAt and\n * updatedAt on insert, updatedAt on every update. archivedAt stays under\n * application control. Register once per table; writes made through the\n * auth constructors keep these fields correct automatically.\n */\nexport function timestamps<DataModel extends GenericDataModel>(\n\ttriggers: Triggers<DataModel>,\n\t...tables: readonly TableNamesInDataModel<DataModel>[]\n) {\n\tfor (const table of tables) {\n\t\ttriggers.register(table, async (ctx, change) => {\n\t\t\tif (change.operation === 'delete') return\n\t\t\tconst now = Date.now()\n\t\t\tif (change.operation === 'insert') {\n\t\t\t\tconst document = change.newDoc as { createdAt?: number }\n\t\t\t\tif (document.createdAt === undefined) {\n\t\t\t\t\tawait ctx.innerDb.patch(change.id, {\n\t\t\t\t\t\tcreatedAt: now,\n\t\t\t\t\t\tupdatedAt: now,\n\t\t\t\t\t} as never)\n\t\t\t\t}\n\t\t\t\treturn\n\t\t\t}\n\t\t\tconst previous = change.oldDoc as { updatedAt?: number }\n\t\t\tconst current = change.newDoc as { updatedAt?: number }\n\t\t\t// A write that already moved updatedAt (including our own patch)\n\t\t\t// is left alone — this is the recursion guard.\n\t\t\tif (current.updatedAt === previous.updatedAt) {\n\t\t\t\tawait ctx.innerDb.patch(change.id, { updatedAt: now } as never)\n\t\t\t}\n\t\t})\n\t}\n}\n"],"mappings":"0DAmBA,SAAgB,GAES,CACxB,OAAO,IAAI,CACZ,CAMA,SAAgB,EACf,EACA,GAAG,EACF,CACD,IAAK,IAAM,KAAS,EACnB,EAAS,SAAS,EAAO,MAAO,EAAM,IAAW,CAChD,GAAI,EAAO,YAAc,SACxB,MAAU,MAAM,GAAG,EAAM,gBAAgB,CAE3C,CAAC,CAEH,CAGA,SAAgB,EACf,EACA,GAAG,EACF,CACD,IAAK,IAAM,KAAS,EACnB,EAAS,SAAS,EAAO,MAAO,EAAM,IAAW,CAChD,GAAI,EAAO,YAAc,SACxB,MAAU,MAAM,GAAG,EAAM,wBAAwB,CAEnD,CAAC,CAEH,CAQA,SAAgB,EACf,EACA,GAAG,EACF,CACD,IAAK,IAAM,KAAS,EACnB,EAAS,SAAS,EAAO,MAAO,EAAK,IAAW,CAC/C,GAAI,EAAO,YAAc,SAAU,OACnC,IAAM,EAAM,KAAK,IAAI,EACrB,GAAI,EAAO,YAAc,SAAU,CACjB,EAAO,OACX,YAAc,IAAA,IAC1B,MAAM,EAAI,QAAQ,MAAM,EAAO,GAAI,CAClC,UAAW,EACX,UAAW,CACZ,CAAU,EAEX,MACD,CACA,IAAM,EAAW,EAAO,OACR,EAAO,OAGX,YAAc,EAAS,WAClC,MAAM,EAAI,QAAQ,MAAM,EAAO,GAAI,CAAE,UAAW,CAAI,CAAU,CAEhE,CAAC,CAEH"}

package/dist/zod-table.d.mts

@@ -0,0 +1,124 @@
+import { ConvexValidatorFromZod, zid } from "convex-helpers/server/zod4";
+import { TableDefinition } from "convex/server";
+import { z } from "zod";
+import { GenericId } from "convex/values";
+//#region src/zod-table.d.ts
+type Shape = Record<string, z.ZodType>;
+type ShapeKey<Fields extends Shape> = Extract<keyof Fields, string>;
+/**
+ * Opinionated lifecycle timestamps — every table has them, server-owned,
+ * always excluded from insert/command boundaries. Maintained by the
+ * `timestamps` trigger helper (see cvx-kit/triggers).
+ */
+declare const timestampShape: {
+  createdAt: z.ZodOptional<z.ZodNumber>;
+  updatedAt: z.ZodOptional<z.ZodNumber>;
+  archivedAt: z.ZodOptional<z.ZodNumber>;
+};
+type TimestampShape = typeof timestampShape;
+declare const TIMESTAMP_FIELDS: readonly ['createdAt', 'updatedAt', 'archivedAt'];
+type TableBoundaryOptions<Fields extends Shape, ServerFields extends readonly ShapeKey<Fields>[], CommandFields extends readonly ShapeKey<Fields>[], PublicFields extends readonly ShapeKey<Fields & TimestampShape>[]> = {
+  serverFields?: ServerFields;
+  commandFields?: CommandFields;
+  publicFields?: PublicFields;
+};
+/** Defines one table and derives its storage, document, write, and DTO boundaries. */
+declare function zodTable<Table extends string, Fields extends Shape, const ServerFields extends readonly ShapeKey<Fields>[] = readonly [], const CommandFields extends readonly ShapeKey<Fields>[] = readonly [], const PublicFields extends readonly ShapeKey<Fields & TimestampShape>[] = readonly []>(tableName: Table, fields: (id: typeof zid) => Fields, options?: TableBoundaryOptions<Fields, ServerFields, CommandFields, PublicFields>): {
+  tableName: Table;
+  schema: z.ZodObject<((keyof Fields & "_creationTime") | (keyof Fields & "_id") extends never ? (Fields & {
+    createdAt: z.ZodOptional<z.ZodNumber>;
+    updatedAt: z.ZodOptional<z.ZodNumber>;
+    archivedAt: z.ZodOptional<z.ZodNumber>;
+  } extends (infer T_1) ? { -readonly [P in keyof T_1]: T_1[P]; } : never) & {
+    _id: import("convex-helpers/server/zod4").Zid<Table>;
+    _creationTime: z.ZodNumber;
+  } : ((Fields & {
+    createdAt: z.ZodOptional<z.ZodNumber>;
+    updatedAt: z.ZodOptional<z.ZodNumber>;
+    archivedAt: z.ZodOptional<z.ZodNumber>;
+  } extends (infer T_1) ? { -readonly [P in keyof T_1]: T_1[P]; } : never) extends (infer T_2 extends z.util.SomeObject) ? { [K in keyof T_2 as K extends "_creationTime" | "_id" ? never : K]: T_2[K]; } : never) & {
+    _id: import("convex-helpers/server/zod4").Zid<Table>;
+    _creationTime: z.ZodNumber;
+  }) extends (infer T) ? { [k in keyof T]: T[k]; } : never, z.core.$strict>;
+  storage: z.ZodObject<Fields & {
+    createdAt: z.ZodOptional<z.ZodNumber>;
+    updatedAt: z.ZodOptional<z.ZodNumber>;
+    archivedAt: z.ZodOptional<z.ZodNumber>;
+  } extends (infer T_1) ? { -readonly [P in keyof T_1]: T_1[P]; } : never, z.core.$strict>;
+  insertSchema: z.ZodObject<Omit<Fields, "archivedAt" | "createdAt" | "updatedAt" | ServerFields[number]>, z.core.$strip>;
+  updateSchema: z.ZodObject<Omit<Fields, "archivedAt" | "createdAt" | "updatedAt" | ServerFields[number]> extends (infer T_3 extends Readonly<{
+    [k: string]: z.core.$ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+  }>) ? { -readonly [k in keyof T_3]: z.ZodOptional<T_3[k]>; } : never, z.core.$strip>;
+  commandInput: z.ZodObject<Pick<Fields & {
+    createdAt: z.ZodOptional<z.ZodNumber>;
+    updatedAt: z.ZodOptional<z.ZodNumber>;
+    archivedAt: z.ZodOptional<z.ZodNumber>;
+  }, CommandFields[number]> extends (infer T_4) ? { -readonly [P in keyof T_4]: T_4[P]; } : never, z.core.$strict>;
+  publicDto: z.ZodObject<Pick<Fields & {
+    createdAt: z.ZodOptional<z.ZodNumber>;
+    updatedAt: z.ZodOptional<z.ZodNumber>;
+    archivedAt: z.ZodOptional<z.ZodNumber>;
+  }, PublicFields[number]> extends (infer T_5) ? { -readonly [P in keyof T_5]: T_5[P]; } : never, z.core.$strict>;
+  toPublicDto: (row: z.input<z.ZodObject<Fields & {
+    createdAt: z.ZodOptional<z.ZodNumber>;
+    updatedAt: z.ZodOptional<z.ZodNumber>;
+    archivedAt: z.ZodOptional<z.ZodNumber>;
+  } extends (infer T_1) ? { -readonly [P in keyof T_1]: T_1[P]; } : never, z.core.$strict>>) => z.core.$InferObjectOutput<Pick<Fields & {
+    createdAt: z.ZodOptional<z.ZodNumber>;
+    updatedAt: z.ZodOptional<z.ZodNumber>;
+    archivedAt: z.ZodOptional<z.ZodNumber>;
+  }, PublicFields[number]> extends (infer T_5) ? { -readonly [P in keyof T_5]: T_5[P]; } : never, {}>;
+  table: TableDefinition<ConvexValidatorFromZod<z.ZodObject<Fields & {
+    createdAt: z.ZodOptional<z.ZodNumber>;
+    updatedAt: z.ZodOptional<z.ZodNumber>;
+    archivedAt: z.ZodOptional<z.ZodNumber>;
+  } extends (infer T_1) ? { -readonly [P in keyof T_1]: T_1[P]; } : never, z.core.$strict>, 'required'>>;
+  insert: {
+    (): z.ZodObject<Omit<Fields, "archivedAt" | "createdAt" | "updatedAt" | ServerFields[number]>, z.core.$strip>;
+    <OmitMask extends z.util.Mask<Exclude<keyof Fields, "archivedAt" | "createdAt" | "updatedAt" | ServerFields[number]>>>(omit: OmitMask): ZodObjectOmit<z.ZodObject<Omit<Fields, "archivedAt" | "createdAt" | "updatedAt" | ServerFields[number]>, z.core.$strip>, OmitMask>;
+  };
+  update: {
+    (): z.ZodObject<Omit<Fields, "archivedAt" | "createdAt" | "updatedAt" | ServerFields[number]> extends (infer T_3 extends Readonly<{
+      [k: string]: z.core.$ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+    }>) ? { -readonly [k in keyof T_3]: z.ZodOptional<T_3[k]>; } : never, z.core.$strip>;
+    <OmitMask extends z.util.Mask<Exclude<keyof Fields, "archivedAt" | "createdAt" | "updatedAt" | ServerFields[number]>>>(omit: OmitMask): ZodObjectOmit<z.ZodObject<Omit<Fields, "archivedAt" | "createdAt" | "updatedAt" | ServerFields[number]> extends (infer T_3 extends Readonly<{
+      [k: string]: z.core.$ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+    }>) ? { -readonly [k in keyof T_3]: z.ZodOptional<T_3[k]>; } : never, z.core.$strip>, OmitMask>;
+  };
+  tools: {
+    insert: z.ZodObject<Pick<Fields & {
+      createdAt: z.ZodOptional<z.ZodNumber>;
+      updatedAt: z.ZodOptional<z.ZodNumber>;
+      archivedAt: z.ZodOptional<z.ZodNumber>;
+    }, CommandFields[number]> extends (infer T_4) ? { -readonly [P in keyof T_4]: T_4[P]; } : never, z.core.$strict>;
+    update: z.ZodObject<{
+      data: z.ZodObject<(Pick<Fields & {
+        createdAt: z.ZodOptional<z.ZodNumber>;
+        updatedAt: z.ZodOptional<z.ZodNumber>;
+        archivedAt: z.ZodOptional<z.ZodNumber>;
+      }, CommandFields[number]> extends (infer T_4) ? { -readonly [P in keyof T_4]: T_4[P]; } : never) extends (infer T_6 extends Readonly<{
+        [k: string]: z.core.$ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+      }>) ? { -readonly [k in keyof T_6]: z.ZodOptional<T_6[k]>; } : never, z.core.$strict>;
+      id: import("convex-helpers/server/zod4").Zid<Table>;
+    }, z.core.$strict>;
+    id: z.ZodObject<{
+      id: import("convex-helpers/server/zod4").Zid<Table>;
+    }, z.core.$strict>;
+  };
+};
+/** Preserves discriminated-union storage while retaining the same table owner. */
+declare function zodVariantTable<Table extends string, Schema extends z.ZodType>(tableName: Table, storage: Schema): {
+  tableName: Table;
+  storage: Schema;
+  insertSchema: Schema;
+  table: TableDefinition<ConvexValidatorFromZod<Schema, "required">, {}, {}, {}>;
+};
+/**
+ * A zid that presents as a plain string in generated JSON schemas so
+ * LLM-tool inputs stay primitive, while keeping the Id type at compile time.
+ */
+declare function jsonSafeZid<Table extends string>(tableName: Table): z.ZodType<GenericId<Table>, string>;
+type ZodObjectOmit<Schema extends z.ZodObject<any, any>, OmitMask extends z.util.Mask<keyof Schema['shape']>> = Schema extends z.ZodObject<infer ObjectShape, infer Config> ? z.ZodObject<z.util.Flatten<Omit<ObjectShape, Extract<keyof ObjectShape, keyof OmitMask>>>, Config> : never;
+//#endregion
+export { TIMESTAMP_FIELDS, TableBoundaryOptions, jsonSafeZid, zodTable, zodVariantTable };
+//# sourceMappingURL=zod-table.d.mts.map

package/dist/zod-table.mjs

@@ -0,0 +1,2 @@
+import{zid as e,zodToConvex as t}from"convex-helpers/server/zod4";import{defineTable as n}from"convex/server";import{z as r}from"zod";const i={createdAt:r.number().optional(),updatedAt:r.number().optional(),archivedAt:r.number().optional()},a=[`createdAt`,`updatedAt`,`archivedAt`];function o(o,s,c={}){let d={...s(e),...i},f=r.object(d).strict(),p=f.extend({_id:e(o),_creationTime:r.number()}),m=r.object(u(d,[...a,...c.serverFields??[]])).strict(),h=m.partial(),g=r.object(l(d,c.commandFields??[])).strict(),_=r.object(l(d,c.publicFields??[])).strict(),v=e=>_.parse(Object.fromEntries(Object.keys(_.shape).map(t=>[t,e[t]])));function y(e){return e?m.omit(e):m}function b(e){return e?h.omit(e):h}return{tableName:o,schema:p,storage:f,insertSchema:m,updateSchema:h,commandInput:g,publicDto:_,toPublicDto:v,table:n(t(f)),insert:y,update:b,tools:{insert:g,update:r.object({data:g.partial(),id:e(o)}).strict(),id:r.object({id:e(o)}).strict()}}}function s(e,r){return{tableName:e,storage:r,insertSchema:r,table:n(t(r))}}function c(e){return r.string().describe(`Convex document id for table "${e}"`)}function l(e,t){return Object.fromEntries(t.map(t=>[t,e[t]]))}function u(e,t){let n=new Set(t);return Object.fromEntries(Object.entries(e).filter(([e])=>!n.has(e)))}export{a as TIMESTAMP_FIELDS,c as jsonSafeZid,o as zodTable,s as zodVariantTable};
+//# sourceMappingURL=zod-table.mjs.map

package/dist/zod-table.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-table.mjs","names":[],"sources":["../src/zod-table.ts"],"sourcesContent":["import {\n\ttype ConvexValidatorFromZod,\n\tzid,\n\tzodToConvex,\n} from 'convex-helpers/server/zod4'\nimport { defineTable, type TableDefinition } from 'convex/server'\nimport type { GenericId } from 'convex/values'\nimport { z } from 'zod'\n\ntype Shape = Record<string, z.ZodType>\ntype ShapeKey<Fields extends Shape> = Extract<keyof Fields, string>\n\n/**\n * Opinionated lifecycle timestamps — every table has them, server-owned,\n * always excluded from insert/command boundaries. Maintained by the\n * `timestamps` trigger helper (see cvx-kit/triggers).\n */\nconst timestampShape = {\n\tcreatedAt: z.number().optional(),\n\tupdatedAt: z.number().optional(),\n\tarchivedAt: z.number().optional(),\n} satisfies Shape\n\ntype TimestampShape = typeof timestampShape\n\nexport const TIMESTAMP_FIELDS = [\n\t'createdAt',\n\t'updatedAt',\n\t'archivedAt',\n] as const\n\nexport type TableBoundaryOptions<\n\tFields extends Shape,\n\tServerFields extends readonly ShapeKey<Fields>[],\n\tCommandFields extends readonly ShapeKey<Fields>[],\n\tPublicFields extends readonly ShapeKey<Fields & TimestampShape>[],\n> = {\n\tserverFields?: ServerFields\n\tcommandFields?: CommandFields\n\tpublicFields?: PublicFields\n}\n\n/** Defines one table and derives its storage, document, write, and DTO boundaries. */\nexport function zodTable<\n\tTable extends string,\n\tFields extends Shape,\n\tconst ServerFields extends readonly ShapeKey<Fields>[] = readonly [],\n\tconst CommandFields extends readonly ShapeKey<Fields>[] = readonly [],\n\tconst PublicFields extends readonly ShapeKey<\n\t\tFields & TimestampShape\n\t>[] = readonly [],\n>(\n\ttableName: Table,\n\tfields: (id: typeof zid) => Fields,\n\toptions: TableBoundaryOptions<\n\t\tFields,\n\t\tServerFields,\n\t\tCommandFields,\n\t\tPublicFields\n\t> = {},\n) {\n\tconst shape = { ...fields(zid), ...timestampShape } as Fields &\n\t\tTimestampShape\n\tconst storage = z.object(shape).strict()\n\tconst schema = storage.extend({\n\t\t_id: zid(tableName),\n\t\t_creationTime: z.number(),\n\t})\n\tconst insertSchema = z\n\t\t.object(\n\t\t\tomitShape(shape, [\n\t\t\t\t...TIMESTAMP_FIELDS,\n\t\t\t\t...(options.serverFields ?? ([] as never)),\n\t\t\t] as never),\n\t\t)\n\t\t.strict() as z.ZodObject<\n\t\tOmit<Fields, ServerFields[number] | (typeof TIMESTAMP_FIELDS)[number]>\n\t>\n\tconst updateSchema = insertSchema.partial()\n\tconst commandInput = z\n\t\t.object(pickShape(shape, options.commandFields ?? ([] as never)))\n\t\t.strict()\n\tconst publicDto = z\n\t\t.object(pickShape(shape, options.publicFields ?? ([] as never)))\n\t\t.strict()\n\tconst toPublicDto = (row: z.input<typeof storage>) =>\n\t\tpublicDto.parse(\n\t\t\tObject.fromEntries(\n\t\t\t\tObject.keys(publicDto.shape).map((key) => [\n\t\t\t\t\tkey,\n\t\t\t\t\t(row as Record<string, unknown>)[key],\n\t\t\t\t]),\n\t\t\t),\n\t\t)\n\n\ttype InsertSchema = typeof insertSchema\n\ttype UpdateSchema = typeof updateSchema\n\ttype InsertMask = z.util.Mask<keyof InsertSchema['shape']>\n\ttype UpdateMask = z.util.Mask<keyof UpdateSchema['shape']>\n\n\tfunction insert(): InsertSchema\n\tfunction insert<OmitMask extends InsertMask>(\n\t\tomit: OmitMask,\n\t): ZodObjectOmit<InsertSchema, OmitMask>\n\tfunction insert(omit?: InsertMask) {\n\t\treturn omit ? insertSchema.omit(omit as never) : insertSchema\n\t}\n\n\tfunction update(): UpdateSchema\n\tfunction update<OmitMask extends UpdateMask>(\n\t\tomit: OmitMask,\n\t): ZodObjectOmit<UpdateSchema, OmitMask>\n\tfunction update(omit?: UpdateMask) {\n\t\treturn omit ? updateSchema.omit(omit as never) : updateSchema\n\t}\n\n\treturn {\n\t\ttableName,\n\t\tschema,\n\t\tstorage,\n\t\tinsertSchema,\n\t\tupdateSchema,\n\t\tcommandInput,\n\t\tpublicDto,\n\t\ttoPublicDto,\n\t\ttable: defineTable(zodToConvex(storage)) as TableDefinition<\n\t\t\tConvexValidatorFromZod<typeof storage, 'required'>\n\t\t>,\n\t\tinsert,\n\t\tupdate,\n\t\ttools: {\n\t\t\tinsert: commandInput,\n\t\t\tupdate: z\n\t\t\t\t.object({ data: commandInput.partial(), id: zid(tableName) })\n\t\t\t\t.strict(),\n\t\t\tid: z.object({ id: zid(tableName) }).strict(),\n\t\t},\n\t}\n}\n\n/** Preserves discriminated-union storage while retaining the same table owner. */\nexport function zodVariantTable<Table extends string, Schema extends z.ZodType>(\n\ttableName: Table,\n\tstorage: Schema,\n) {\n\treturn {\n\t\ttableName,\n\t\tstorage,\n\t\tinsertSchema: storage,\n\t\ttable: defineTable(zodToConvex(storage)),\n\t}\n}\n\n/**\n * A zid that presents as a plain string in generated JSON schemas so\n * LLM-tool inputs stay primitive, while keeping the Id type at compile time.\n */\nexport function jsonSafeZid<Table extends string>(tableName: Table) {\n\treturn z\n\t\t.string()\n\t\t.describe(\n\t\t\t`Convex document id for table \"${tableName}\"`,\n\t\t) as unknown as z.ZodType<GenericId<Table>, string>\n}\n\ntype ZodObjectOmit<\n\tSchema extends z.ZodObject<any, any>,\n\tOmitMask extends z.util.Mask<keyof Schema['shape']>,\n> =\n\tSchema extends z.ZodObject<infer ObjectShape, infer Config>\n\t\t? z.ZodObject<\n\t\t\t\tz.util.Flatten<\n\t\t\t\t\tOmit<ObjectShape, Extract<keyof ObjectShape, keyof OmitMask>>\n\t\t\t\t>,\n\t\t\t\tConfig\n\t\t\t>\n\t\t: never\n\nfunction pickShape<\n\tFields extends Shape,\n\tconst Keys extends readonly ShapeKey<Fields>[],\n>(fields: Fields, keys: Keys) {\n\treturn Object.fromEntries(keys.map((key) => [key, fields[key]])) as Pick<\n\t\tFields,\n\t\tKeys[number]\n\t>\n}\n\nfunction omitShape<\n\tFields extends Shape,\n\tconst Keys extends readonly ShapeKey<Fields>[],\n>(fields: Fields, keys: Keys) {\n\tconst omitted = new Set<string>(keys)\n\treturn Object.fromEntries(\n\t\tObject.entries(fields).filter(([key]) => !omitted.has(key)),\n\t) as Omit<Fields, Keys[number]>\n}\n"],"mappings":"sIAiBA,MAAM,EAAiB,CACtB,UAAW,EAAE,OAAO,CAAC,CAAC,SAAS,EAC/B,UAAW,EAAE,OAAO,CAAC,CAAC,SAAS,EAC/B,WAAY,EAAE,OAAO,CAAC,CAAC,SAAS,CACjC,EAIa,EAAmB,CAC/B,YACA,YACA,YACD,EAcA,SAAgB,EASf,EACA,EACA,EAKI,CAAC,EACJ,CACD,IAAM,EAAQ,CAAE,GAAG,EAAO,CAAG,EAAG,GAAG,CAAe,EAE5C,EAAU,EAAE,OAAO,CAAK,CAAC,CAAC,OAAO,EACjC,EAAS,EAAQ,OAAO,CAC7B,IAAK,EAAI,CAAS,EAClB,cAAe,EAAE,OAAO,CACzB,CAAC,EACK,EAAe,EACnB,OACA,EAAU,EAAO,CAChB,GAAG,EACH,GAAI,EAAQ,cAAiB,CAAC,CAC/B,CAAU,CACX,CAAC,CACA,OAAO,EAGH,EAAe,EAAa,QAAQ,EACpC,EAAe,EACnB,OAAO,EAAU,EAAO,EAAQ,eAAkB,CAAC,CAAW,CAAC,CAAC,CAChE,OAAO,EACH,EAAY,EAChB,OAAO,EAAU,EAAO,EAAQ,cAAiB,CAAC,CAAW,CAAC,CAAC,CAC/D,OAAO,EACH,EAAe,GACpB,EAAU,MACT,OAAO,YACN,OAAO,KAAK,EAAU,KAAK,CAAC,CAAC,IAAK,GAAQ,CACzC,EACC,EAAgC,EAClC,CAAC,CACF,CACD,EAWD,SAAS,EAAO,EAAmB,CAClC,OAAO,EAAO,EAAa,KAAK,CAAa,EAAI,CAClD,CAMA,SAAS,EAAO,EAAmB,CAClC,OAAO,EAAO,EAAa,KAAK,CAAa,EAAI,CAClD,CAEA,MAAO,CACN,YACA,SACA,UACA,eACA,eACA,eACA,YACA,cACA,MAAO,EAAY,EAAY,CAAO,CAAC,EAGvC,SACA,SACA,MAAO,CACN,OAAQ,EACR,OAAQ,EACN,OAAO,CAAE,KAAM,EAAa,QAAQ,EAAG,GAAI,EAAI,CAAS,CAAE,CAAC,CAAC,CAC5D,OAAO,EACT,GAAI,EAAE,OAAO,CAAE,GAAI,EAAI,CAAS,CAAE,CAAC,CAAC,CAAC,OAAO,CAC7C,CACD,CACD,CAGA,SAAgB,EACf,EACA,EACC,CACD,MAAO,CACN,YACA,UACA,aAAc,EACd,MAAO,EAAY,EAAY,CAAO,CAAC,CACxC,CACD,CAMA,SAAgB,EAAkC,EAAkB,CACnE,OAAO,EACL,OAAO,CAAC,CACR,SACA,iCAAiC,EAAU,EAC5C,CACF,CAeA,SAAS,EAGP,EAAgB,EAAY,CAC7B,OAAO,OAAO,YAAY,EAAK,IAAK,GAAQ,CAAC,EAAK,EAAO,EAAI,CAAC,CAAC,CAIhE,CAEA,SAAS,EAGP,EAAgB,EAAY,CAC7B,IAAM,EAAU,IAAI,IAAY,CAAI,EACpC,OAAO,OAAO,YACb,OAAO,QAAQ,CAAM,CAAC,CAAC,QAAQ,CAAC,KAAS,CAAC,EAAQ,IAAI,CAAG,CAAC,CAC3D,CACD"}

package/package.json

@@ -0,0 +1,108 @@
+{
+	"name": "cvx-kit",
+	"version": "0.0.1",
+	"description": "Reusable Convex application kit: foundation kernels, approvals component, zod table boundaries, WorkOS-backed auth function constructors, and audited command protocol.",
+	"type": "module",
+	"license": "MIT",
+	"sideEffects": false,
+	"files": [
+		"dist",
+		"src"
+	],
+	"exports": {
+		"./package.json": "./package.json",
+		".": {
+			"types": "./dist/index.d.mts",
+			"import": "./dist/index.mjs"
+		},
+		"./zod-table": {
+			"types": "./dist/zod-table.d.mts",
+			"import": "./dist/zod-table.mjs"
+		},
+		"./auth": {
+			"types": "./dist/auth.d.mts",
+			"import": "./dist/auth.mjs"
+		},
+		"./triggers": {
+			"types": "./dist/triggers.d.mts",
+			"import": "./dist/triggers.mjs"
+		},
+		"./errors": {
+			"types": "./dist/errors.d.mts",
+			"import": "./dist/errors.mjs"
+		},
+		"./test": "./src/test.ts",
+		"./components/foundation": {
+			"types": "./dist/components/foundation/client.d.mts",
+			"import": "./dist/components/foundation/client.mjs"
+		},
+		"./components/foundation/convex.config": {
+			"types": "./dist/components/foundation/convex.config.d.mts",
+			"import": "./dist/components/foundation/convex.config.mjs"
+		},
+		"./components/foundation/convex.config.js": {
+			"types": "./dist/components/foundation/convex.config.d.mts",
+			"import": "./dist/components/foundation/convex.config.mjs"
+		},
+		"./components/foundation/_generated/component": {
+			"types": "./dist/components/foundation/_generated/component.d.mts"
+		},
+		"./components/approvals": {
+			"types": "./dist/components/approvals/client.d.mts",
+			"import": "./dist/components/approvals/client.mjs"
+		},
+		"./components/approvals/convex.config": {
+			"types": "./dist/components/approvals/convex.config.d.mts",
+			"import": "./dist/components/approvals/convex.config.mjs"
+		},
+		"./components/approvals/convex.config.js": {
+			"types": "./dist/components/approvals/convex.config.d.mts",
+			"import": "./dist/components/approvals/convex.config.mjs"
+		},
+		"./components/approvals/_generated/component": {
+			"types": "./dist/components/approvals/_generated/component.d.mts"
+		}
+	},
+	"scripts": {
+		"build": "vp pack",
+		"typecheck": "tsc --noEmit",
+		"test": "vp test run",
+		"prepublishOnly": "bun run typecheck && bun run test && bun run build",
+		"build:codegen": "convex codegen --component-dir ./src/components/foundation && convex codegen --component-dir ./src/components/approvals && vp pack",
+		"release": "npm version patch && git push --follow-tags",
+		"release:minor": "npm version minor && git push --follow-tags"
+	},
+	"dependencies": {
+		"@convex-dev/workflow": "0.4.4",
+		"convex-audit-log": "^0.2.0",
+		"convex-helpers": "0.1.122"
+	},
+	"peerDependencies": {
+		"convex": "^1.43.0",
+		"zod": "^4.0.0"
+	},
+	"devDependencies": {
+		"@edge-runtime/vm": "^5.0.0",
+		"convex": "1.43.0",
+		"convex-test": "^0.0.55",
+		"publint": "^0.3.23",
+		"typescript": "7.0.2",
+		"vite-plus": "0.2.8",
+		"zod": "4.4.3"
+	},
+	"keywords": [
+		"convex",
+		"component",
+		"workos",
+		"zod"
+	],
+	"author": "Angel Lopez",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/ImRLopezAG/cvx-kit.git"
+	},
+	"homepage": "https://github.com/ImRLopezAG/cvx-kit#readme",
+	"bugs": {
+		"url": "https://github.com/ImRLopezAG/cvx-kit/issues"
+	}
+}